CVE-2026-32094: Shescape Missing Bracket Glob Escapecve-2026-32094-shescape-missing-bracket-glob-escape
Missing escaping of square brackets in shell execution context, allowing glob expansion bypass.
Explore
Rule Explorer
Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
- Public rules
- 2917
- Downloads
- 3.3M
- Verified
- 2917
- Authors
- 2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
CVE-2026-3209: Improper Parameter Precedence Auth Bypasscve-2026-3209-improper-parameter-precedence-auth-bypass
Detects an authorization or parameter validation bypass where a batch array input incorrectly takes precedence over a single ID input via short-circuiting. If an attacker provides a valid array in the request body alongside an unauthorized single targeted ID in the URL parameter, the application might validate the array but act on the targeted ID. Prioritize
All matching rules loaded.